Overview

URLmamtammalkss.azurewebsites.net/
IP 20.119.0.28 (United States)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-27 00:12:03 UTC
StatusLoading report..
IDS alerts0
Blocklist alert0
urlquery alerts
11
Phishing - Generic Crypto/Wallet
Tags crypto phishing

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 20.119.0.28
Date UQ / IDS / BL URL IP
2023-02-09 03:58:19 +0000 0 - 4 - 51 kkarskeanlog.azurewebsites.net/ 20.119.0.28
2023-02-08 13:37:39 +0000 0 - 4 - 51 kkarskeanlog.azurewebsites.net/ 20.119.0.28
2023-02-08 01:24:48 +0000 0 - 4 - 16 ccoaisnsbelog.azurewebsites.net/ 20.119.0.28
2023-02-07 23:41:44 +0000 0 - 4 - 28 mmeaatamaskslog.azurewebsites.net/ 20.119.0.28
2023-02-03 22:26:16 +0000 39 - 0 - 0 aalert-cald-nowx-ssm-ce-cdc-cdcdc-klmll-dcdd- (...) 20.119.0.28


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-03-29 19:04:27 +0000 0 - 6 - 0 shrekis.life/SQ2K83 52.173.151.229
2023-03-29 18:57:42 +0000 0 - 2 - 0 packagesupportforusps.ddns.mobi/155e862b96399 (...) 20.245.77.166
2023-03-29 18:50:55 +0000 0 - 0 - 2 www.vip556622.com/ 20.239.193.208
2023-03-29 18:44:30 +0000 0 - 2 - 0 d.nymexwq.top/ 20.24.96.224
2023-03-29 18:26:14 +0000 0 - 2 - 0 www.shopeevipx.top/ 20.89.96.98


Last 3 reports on domain: mamtammalkss.azurewebsites.net
Date UQ / IDS / BL URL IP
2023-01-27 20:40:56 +0000 10 - 0 - 30 mamtammalkss.azurewebsites.net/ 20.119.0.28
2023-01-27 06:06:33 +0000 10 - 0 - 20 mamtammalkss.azurewebsites.net/ 20.119.0.28
2023-01-27 00:12:03 +0000 11 - 0 - 0 mamtammalkss.azurewebsites.net/ 20.119.0.28


Last 3 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-27 20:40:56 +0000 10 - 0 - 30 mamtammalkss.azurewebsites.net/ 20.119.0.28
2023-01-27 06:06:33 +0000 10 - 0 - 20 mamtammalkss.azurewebsites.net/ 20.119.0.28
2023-01-26 19:10:35 +0000 11 - 0 - 22 mmetataamsksass.azurewebsites.net/ 20.119.0.18

JavaScript

Executed Scripts (13)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 12790) - SHA256: 139443ec027482f8bb1a64d96ca28ac8b7d8dab5e86e5d3666dd3a20002357e8
< !DOCTYPE html >
    < html >
    < head >
    < style >

    /* cyrillic-ext */
    @font - face {
        font - family: 'Noto Sans';
        font - style: normal;
        font - weight: 400;
        font - display: swap;
        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6DRASf6M7VBj.woff2) format('woff2');
                unicode - range: U + 0460 - 052 F, U + 1 C80 - 1 C88, U + 20 B4, U + 2 DE0 - 2 DFF, U + A640 - A69F, U + FE2E - FE2F;
            }
            /* cyrillic */
            @
        font - face {
                font - family: 'Noto Sans';
                font - style: normal;
                font - weight: 400;
                font - display: swap;
                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr4TRASf6M7VBj.woff2) format('woff2');
                        unicode - range: U + 0301, U + 0400 - 045 F, U + 0490 - 0491, U + 04 B0 - 04 B1, U + 2116;
                    }
                    /* devanagari */
                    @
                font - face {
                        font - family: 'Noto Sans';
                        font - style: normal;
                        font - weight: 400;
                        font - display: swap;
                        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5DRASf6M7VBj.woff2) format('woff2');
                                unicode - range: U + 0900 - 097 F, U + 1 CD0 - 1 CF6, U + 1 CF8 - 1 CF9, U + 200 C - 200 D, U + 20 A8, U + 20 B9, U + 25 CC, U + A830 - A839, U + A8E0 - A8FB;
                            }
                            /* greek-ext */
                            @
                        font - face {
                                font - family: 'Noto Sans';
                                font - style: normal;
                                font - weight: 400;
                                font - display: swap;
                                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6TRASf6M7VBj.woff2) format('woff2');
                                        unicode - range: U + 1 F00 - 1 FFF;
                                    }
                                    /* greek */
                                    @
                                font - face {
                                        font - family: 'Noto Sans';
                                        font - style: normal;
                                        font - weight: 400;
                                        font - display: swap;
                                        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5jRASf6M7VBj.woff2) format('woff2');
                                                unicode - range: U + 0370 - 03 FF;
                                            }
                                            /* vietnamese */
                                            @
                                        font - face {
                                                font - family: 'Noto Sans';
                                                font - style: normal;
                                                font - weight: 400;
                                                font - display: swap;
                                                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6jRASf6M7VBj.woff2) format('woff2');
                                                        unicode - range: U + 0102 - 0103, U + 0110 - 0111, U + 0128 - 0129, U + 0168 - 0169, U + 01 A0 - 01 A1, U + 01 AF - 01 B0, U + 1E A0 - 1E F9, U + 20 AB;
                                                    }
                                                    /* latin-ext */
                                                    @
                                                font - face {
                                                        font - family: 'Noto Sans';
                                                        font - style: normal;
                                                        font - weight: 400;
                                                        font - display: swap;
                                                        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6zRASf6M7VBj.woff2) format('woff2');
                                                                unicode - range: U + 0100 - 024 F, U + 0259, U + 1E00 - 1E FF, U + 2020, U + 20 A0 - 20 AB, U + 20 AD - 20 CF, U + 2113, U + 2 C60 - 2 C7F, U + A720 - A7FF;
                                                            }
                                                            /* latin */
                                                            @
                                                        font - face {
                                                                font - family: 'Noto Sans';
                                                                font - style: normal;
                                                                font - weight: 400;
                                                                font - display: swap;
                                                                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2) format('woff2');
                                                                        unicode - range: U + 0000 - 00 FF, U + 0131, U + 0152 - 0153, U + 02 BB - 02 BC, U + 02 C6, U + 02 DA, U + 02 DC, U + 2000 - 206 F, U + 2074, U + 20 AC, U + 2122, U + 2191, U + 2193, U + 2212, U + 2215, U + FEFF, U + FFFD;
                                                                    }
                                                                    /* cyrillic-ext */
                                                                    @
                                                                font - face {
                                                                        font - family: 'Noto Sans';
                                                                        font - style: normal;
                                                                        font - weight: 700;
                                                                        font - display: swap;
                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVadyBx2pqPIif.woff2) format('woff2');
                                                                                unicode - range: U + 0460 - 052 F, U + 1 C80 - 1 C88, U + 20 B4, U + 2 DE0 - 2 DFF, U + A640 - A69F, U + FE2E - FE2F;
                                                                            }
                                                                            /* cyrillic */
                                                                            @
                                                                        font - face {
                                                                                font - family: 'Noto Sans';
                                                                                font - style: normal;
                                                                                font - weight: 700;
                                                                                font - display: swap;
                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVYNyBx2pqPIif.woff2) format('woff2');
                                                                                        unicode - range: U + 0301, U + 0400 - 045 F, U + 0490 - 0491, U + 04 B0 - 04 B1, U + 2116;
                                                                                    }
                                                                                    /* devanagari */
                                                                                    @
                                                                                font - face {
                                                                                        font - family: 'Noto Sans';
                                                                                        font - style: normal;
                                                                                        font - weight: 700;
                                                                                        font - display: swap;
                                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZdyBx2pqPIif.woff2) format('woff2');
                                                                                                unicode - range: U + 0900 - 097 F, U + 1 CD0 - 1 CF6, U + 1 CF8 - 1 CF9, U + 200 C - 200 D, U + 20 A8, U + 20 B9, U + 25 CC, U + A830 - A839, U + A8E0 - A8FB;
                                                                                            }
                                                                                            /* greek-ext */
                                                                                            @
                                                                                        font - face {
                                                                                                font - family: 'Noto Sans';
                                                                                                font - style: normal;
                                                                                                font - weight: 700;
                                                                                                font - display: swap;
                                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVaNyBx2pqPIif.woff2) format('woff2');
                                                                                                        unicode - range: U + 1 F00 - 1 FFF;
                                                                                                    }
                                                                                                    /* greek */
                                                                                                    @
                                                                                                font - face {
                                                                                                        font - family: 'Noto Sans';
                                                                                                        font - style: normal;
                                                                                                        font - weight: 700;
                                                                                                        font - display: swap;
                                                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZ9yBx2pqPIif.woff2) format('woff2');
                                                                                                                unicode - range: U + 0370 - 03 FF;
                                                                                                            }
                                                                                                            /* vietnamese */
                                                                                                            @
                                                                                                        font - face {
                                                                                                                font - family: 'Noto Sans';
                                                                                                                font - style: normal;
                                                                                                                font - weight: 700;
                                                                                                                font - display: swap;
                                                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVa9yBx2pqPIif.woff2) format('woff2');
                                                                                                                        unicode - range: U + 0102 - 0103, U + 0110 - 0111, U + 0128 - 0129, U + 0168 - 0169, U + 01 A0 - 01 A1, U + 01 AF - 01 B0, U + 1E A0 - 1E F9, U + 20 AB;
                                                                                                                    }
                                                                                                                    /* latin-ext */
                                                                                                                    @
                                                                                                                font - face {
                                                                                                                        font - family: 'Noto Sans';
                                                                                                                        font - style: normal;
                                                                                                                        font - weight: 700;
                                                                                                                        font - display: swap;
                                                                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVatyBx2pqPIif.woff2) format('woff2');
                                                                                                                                unicode - range: U + 0100 - 024 F, U + 0259, U + 1E00 - 1E FF, U + 2020, U + 20 A0 - 20 AB, U + 20 AD - 20 CF, U + 2113, U + 2 C60 - 2 C7F, U + A720 - A7FF;
                                                                                                                            }
                                                                                                                            /* latin */
                                                                                                                            @
                                                                                                                        font - face {
                                                                                                                                font - family: 'Noto Sans';
                                                                                                                                font - style: normal;
                                                                                                                                font - weight: 700;
                                                                                                                                font - display: swap;
                                                                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2) format('woff2');
                                                                                                                                    unicode - range: U + 0000 - 00 FF, U + 0131, U + 0152 - 0153, U + 02 BB - 02 BC, U + 02 C6, U + 02 DA, U + 02 DC, U + 2000 - 206 F, U + 2074, U + 20 AC, U + 2122, U + 2191, U + 2193, U + 2212, U + 2215, U + FEFF, U + FFFD;
                                                                                                                                }

                                                                                                                                * {
                                                                                                                                    font - family: 'Noto Sans', sans - serif;
                                                                                                                                    box - sizing: border - box; - webkit - font - smoothing: antialiased; - moz - osx - font - smoothing: grayscale; - webkit - tap - highlight - color: transparent;
                                                                                                                                }
                                                                                                                                body {
                                                                                                                                    margin: 0;
                                                                                                                                } < /style> < style data - emotion = "css-global 1h1ne2e" > .css - 1 h1ne2e {
                                                                                                                                    max - width: 100 % ;
                                                                                                                                    position: absolute;
                                                                                                                                    bottom: 0;
                                                                                                                                    z - index: 2;
                                                                                                                                    display: -webkit - box;
                                                                                                                                    display: -webkit - flex;
                                                                                                                                    display: -ms - flexbox;
                                                                                                                                    display: flex; - webkit - align - items: flex - end; - webkit - box - align: flex - end; - ms - flex - align: flex - end;
                                                                                                                                    align - items: flex - end;
                                                                                                                                    will - change: width, height, transform, opacity; - webkit - backface - visibility: hidden;
                                                                                                                                    backface - visibility: hidden;
                                                                                                                                    padding: 0.8e m 0.8e m 0 0.8e m;
                                                                                                                                    right: 0; - webkit - box - pack: end; - ms - flex - pack: end; - webkit - justify - content: flex - end;
                                                                                                                                    justify - content: flex - end;
                                                                                                                                    --primary - color: #2000F0;--secondary-color:# FFFFFF;
                                                                                                                                    --tertiary - color: # E3E3E3;
                                                                                                                                } < /style><style data-emotion="css-global 1aasxu6">.css-1aasxu6{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;min-width:0;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;}</style > < style data - emotion = "css-global 1g9ek8d" > .css - 1 g9ek8d {
                                                                                                                                    display: -webkit - box;display: -webkit - flex;display: -ms - flexbox;display: flex;min - width: 0;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;
                                                                                                                                } < /style><style data-emotion="css-global 17ar2tj">.css-17ar2tj{position:relative;width:255px;height:50px;box-shadow:0 4px 12px rgba(0,0,0,0.3);background:#FFFFFF;border-radius:8px 8px 0px 0px;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;padding:0 0.9em;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;position:relative;color:#FFFFFF;background-color:#0F8524;}.css-17ar2tj:hover{cursor:pointer;}.css-17ar2tj:focus{outline-style:auto;}</style > < style data - emotion = "css-global e4pgre" > .css - e4pgre {
                                                                                                                                    margin: 1e m 0;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;white - space: nowrap;overflow: hidden;text - overflow: ellipsis; - webkit - box - flex: 1; - webkit - flex - grow: 1; - ms - flex - positive: 1;flex - grow: 1;font - weight: 700;font - size: 0.9e m;margin - right: 4 px;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;white - space: nowrap;overflow: hidden;text - overflow: ellipsis;
                                                                                                                                } < /style><style data-emotion="css-global 18iiw16">.css-18iiw16{-webkit-appearance:none;-moz-appearance:none;-ms-appearance:none;appearance:none;background:transparent;border:0;display:inline-block;margin:0;padding:0.5em;color:inherit;cursor:pointer;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;padding:0 .5em;padding:0;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;border:0;border-radius:6px;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;}.css-18iiw16:disabled{cursor:not-allowed;}.css-18iiw16:focus{outline-style:auto;}</style > < style data - emotion = "css-global 1potzn5" > .css - 1 potzn5 {
                                                                                                                                    position: relative;display: -webkit - box;display: -webkit - flex;display: -ms - flexbox;display: flex;width: 24 px;height: 24 px; - webkit - align - items: center; - webkit - box - align: center; - ms - flex - align: center;align - items: center; - webkit - box - pack: center; - ms - flex - pack: center; - webkit - justify - content: center;justify - content: center;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;
                                                                                                                                } < /style><style data-emotion="css-global 1usdo54">.css-1usdo54{display:inline-block;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;width:1em;height:1em;font-size:1.5rem;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;fill:currentColor;}</style > < style data - emotion = "css-global 1adcsh3" > .css - 1 adcsh3 {
                                                                                                                                    opacity: 1; - webkit - transform: scale(1); - moz - transform: scale(1); - ms - transform: scale(1);transform: scale(1);transform - origin: 50 % 50 % ; - webkit - transition: 200 ms cubic - bezier(0.18, 0.89, 0.32, 1.28) 50 ms;transition: 200 ms cubic - bezier(0.18, 0.89, 0.32, 1.28) 50 ms;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;
                                                                                                                                } < /style><style data-emotion="css-global anyrkw">.css-anyrkw{position:absolute;z-index:1;left:0;right:0;bottom:1px;-webkit-transition:opacity 150ms cubic-bezier(0.33, 0, 0.67, 1) 50ms;transition:opacity 150ms cubic-bezier(0.33, 0, 0.67, 1) 50ms;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:24px;height:24px;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;opacity:0;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;}</style > < style data - emotion = "css " > < /style> < /head> < body > < div dir = "ltr"
                                                                                                                                role = "main"
                                                                                                                                data - lc - id = "0"
                                                                                                                                data - lc - event = "mouseover:rpmoa7r4p1;focus:qmj68r7eom;blur:d6snbz6vipf"
                                                                                                                                class = "css-1h1ne2e eqd5v0k0" > < div class = "css-1aasxu6 ek650k30" > < div class = "css-1g9ek8d e108e6fy0" > < /div><div class="css-1g9ek8d e108e6fy0"><div data-lc-id="1" data-lc-event="click:83g9rqoa5tq;mouseleave:bzah1cqmnf9;mouseenter:ofkexbc4sqs;focus:abs0ulcg82;blur:s5lpvybj9i" class="css-17ar2tj e16i86ec1"><p class="css-e4pgre e16i86ec0">Chat now</p > < button type = "button"
                                                                                                                                aria - label = "Open LiveChat chat widget"
                                                                                                                                class = "e1mwfyk10 css-18iiw16 e1m5b1js0" > < div class = "css-1potzn5 e1dmt1bi3" > < svg color = "inherit"
                                                                                                                                viewBox = "0 0 32 32"
                                                                                                                                class = "css-1usdo54" > < path fill = "#FFFFFF"
                                                                                                                                d = "M12.63,26.46H8.83a6.61,6.61,0,0,1-6.65-6.07,89.05,89.05,0,0,1,0-11.2A6.5,6.5,0,0,1,8.23,3.25a121.62,121.62,0,0,1,15.51,0A6.51,6.51,0,0,1,29.8,9.19a77.53,77.53,0,0,1,0,11.2,6.61,6.61,0,0,1-6.66,6.07H19.48L12.63,31V26.46" > < /path><path fill="#0F8524" d="M19.57,21.68h3.67a2.08,2.08,0,0,0,2.11-1.81,89.86,89.86,0,0,0,0-10.38,1.9,1.9,0,0,0-1.84-1.74,113.15,113.15,0,0,0-15,0A1.9,1.9,0,0,0,6.71,9.49a74.92,74.92,0,0,0-.06,10.38,2,2,0,0,0,2.1,1.81h3.81V26.5Z" class="css-1adcsh3 eam5rsy0"></path > < /svg><div class="css-anyrkw e1dmt1bi2"></div > < /div></button > < /div></div > < /div></div > < /body> < /html>


HTTP Transactions (47)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10375
Expires: Fri, 27 Jan 2023 03:04:47 GMT
Date: Fri, 27 Jan 2023 00:11:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12272
Expires: Fri, 27 Jan 2023 03:36:24 GMT
Date: Fri, 27 Jan 2023 00:11:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5065
Expires: Fri, 27 Jan 2023 01:36:17 GMT
Date: Fri, 27 Jan 2023 00:11:52 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 23:35:18 GMT
age: 2194
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    dcd75ca6daca51c5e39d431468511793
Sha1:   07f76d3bf23d65c9110d810fa71a994e39e085d3
Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 2esJScy5Uv3ccIL2oa0bDkDPXm9wqENIB5mATeXMCDGkOS/bx8BURnhI3U78Y6nF4WUwCDl48zk=
x-amz-request-id: 644NGP3AXJBYN8H4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 23:20:18 GMT
age: 3094
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET / HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         20.119.0.28
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Date: Fri, 27 Jan 2023 00:11:52 GMT
Location: https://mamtammalkss.azurewebsites.net/


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 27 Jan 2023 00:11:52 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 23:41:40 GMT
age: 1813
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Content-Encoding: gzip
ETag: W/"63d30398-1678"
Last-Modified: Thu, 26 Jan 2023 22:50:00 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (672), with CRLF line terminators
Size:   2335
Md5:    d3d5daddf920a088d05409e702b23e84
Sha1:   ae329d2cf78a73c54f0ec5bad6b92dcd74a78fc3
Sha256: 7b45da3863479120896cd8bcee3f9520053bd70a5aa112a21c9be6820e7bdf88
                                        
                                            GET /ajax/libs/font-awesome/6.1.1/css/all.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mamtammalkss.azurewebsites.net
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Fri, 27 Jan 2023 00:11:53 GMT
content-length: 17041
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "623a082a-4291"
last-modified: Tue, 22 Mar 2022 17:32:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 10445474
expires: Wed, 17 Jan 2024 00:11:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OlpN5F1UxGRNEIe%2FiohqpMYhVq0Q8rGN8IbIKN1dZiahk9rInyQ6%2BSvSZIVhzMxgMGdYabIW5fGNPe9rl1D2bCYMLmXjLZd%2FNF6kLA5DuR3bS1pVTBNj0V23rR3qcCWHWuF15Juv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78fd460bcec2b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65317)
Size:   17041
Md5:    be9aeb2a05f665e3606faf11c09b542f
Sha1:   5644d0bd4e12fdfb7235166d2883fc7acd0a2c5b
Sha256: 13ace8ab3d9e2cbaf3fe1768b9ba1fc5313a5541607b4c07121c0abbb7fadfae
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6707
Expires: Fri, 27 Jan 2023 02:03:40 GMT
Date: Fri, 27 Jan 2023 00:11:53 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 27 Jan 2023 00:11:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 27 Jan 2023 00:11:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/css/all.min.css HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 59348
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303a7-e7d4"
Last-Modified: Thu, 26 Jan 2023 22:50:15 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (59158), with CRLF line terminators
Size:   59348
Md5:    c6920efb7784a86ed443ef70db8f317d
Sha1:   2c2236d61417d354b5cbbc907dfc9c0eb1325a7f
Sha256: c493875ea907c37e2ef7b9560f75ad5dd918121a0f42889eda351ccab0373eb1

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZSK4Z5Qh1MHs74/6hVtnhQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.165.237.81
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0qrbOrzwilC5sEQ2dCKTHBaA1aw=

                                        
                                            GET /assets/css/signin.css HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 4615
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303a8-1207"
Last-Modified: Thu, 26 Jan 2023 22:50:16 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4615
Md5:    4d1669c7664c48fc2dce908efa626072
Sha1:   c4724382e01985cd2611a9e2daf59b7287c41b92
Sha256: 56952588e0e2b240d6d903c89ecf70c39e4666ea7e84846802cc24d3519cfafa

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /assets/js/jquery-3.5.1.min.js HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 89478
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303b0-15d86"
Last-Modified: Thu, 26 Jan 2023 22:50:24 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65450), with CRLF line terminators
Size:   89478
Md5:    b61aa6e2d68d21b3546b5b418bf0e9c3
Sha1:   9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
Sha256: f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /assets/js/bootstrap.min.js HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 63246
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303b2-f70e"
Last-Modified: Thu, 26 Jan 2023 22:50:26 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (62961), with CRLF line terminators
Size:   63246
Md5:    9641c0f6951378d75b69f235dbc28d91
Sha1:   ed3c7a26df82e432b13b7e16d606ec6173cf7315
Sha256: 52bb7446862e479f013494ba2cefb1105c68e66f5be24fb57173c81bb395f8e1

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /assets/css/bootstrap.min.css HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 160398
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303a8-2728e"
Last-Modified: Thu, 26 Jan 2023 22:50:16 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65321), with CRLF line terminators
Size:   160398
Md5:    d66fe393345e62baa20253a974cdc8d2
Sha1:   334f40dd947ed1dc3247ee94d13b6f60410a17b4
Sha256: b64b23b4a62a17d314b64f2dc76260b4c5bcd10135c092eb59372d998c2ef7ae

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&family=Oswald:wght@200;300;400;500;600;700&family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&family=Ropa+Sans:ital@0;1&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 00:11:53 GMT
date: Fri, 27 Jan 2023 00:11:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3826
Md5:    315f1d98992cff639b9aa4362ceba06f
Sha1:   aab2e74617ede68e9e57e19b6c0030f8a3b0918f
Sha256: 0cc58ea8acb3b3b8a7c359c0b000987005ce4b4f55b88d5a4f841848df69809f
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mamtammalkss.azurewebsites.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:33:54 GMT
expires: Thu, 25 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 103080
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /assets/images/logo_meta.jpg HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 5951
Date: Fri, 27 Jan 2023 00:11:54 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303ad-173f"
Last-Modified: Thu, 26 Jan 2023 22:50:21 GMT


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 165x32, components 3\012- data
Size:   5951
Md5:    cd55144452a07500d6f0ae5f2190e294
Sha1:   122748fa2ea68238365d93accae037e0ec3161fd
Sha256: 2f876ba81fde8f35cd845ca716af8ff3aa7f6e2739c2393195439317b3947394

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mamtammalkss.azurewebsites.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 04:05:29 GMT
expires: Tue, 23 Jan 2024 04:05:29 GMT
cache-control: public, max-age=31536000
age: 331585
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Size:   7884
Md5:    9212f6f9860f9fc6c69b02fedf6db8c3
Sha1:   ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
Sha256: 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 27 Jan 2023 00:11:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/assets/css/all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Content-Length: 80300
Date: Fri, 27 Jan 2023 00:11:54 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303bd-139ac"
Last-Modified: Thu, 26 Jan 2023 22:50:37 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392\012- data
Size:   80300
Md5:    8e1ed89b6ccb8ce41faf5cb672677105
Sha1:   9b592048b9062b00f0b2dd782d70a95b7dc69b83
Sha256: 6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /assets/js/popper.js HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 525927
Date: Fri, 27 Jan 2023 00:11:53 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303b1-80667"
Last-Modified: Thu, 26 Jan 2023 22:50:25 GMT


--- Additional Info ---
Magic:  Microsoft OOXML\012- Zip archive data, at least v2.0\012- to extract, compression method=deflate\012- data
Size:   525927
Md5:    885c643ca3a632b8efa41726c7796cc6
Sha1:   21ba8b3517d6684a6e5658dde50418c6ed45e748
Sha256: c38e8c5a40f00294b6ba95bea3c5bd346678b4845cc7eed1d67c70db1bb0d581

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            GET /tracking.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Wed, 25 Jan 2023 08:47:12 GMT
x-amz-version-id: iNzmqDcn1iRKaLiTk37THrDgz9osPO8C
server: AmazonS3
content-encoding: br
etag: W/"29e075294399875f6fd4bdaa0f4a20e4"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: qzl-0Ag5XGkDv_kWLbnI4JJvQy7icD_Dvire8pnIpy79iQNET2NH5w==
content-length: 26103
cache-control: max-age=28800
expires: Fri, 27 Jan 2023 08:11:54 GMT
date: Fri, 27 Jan 2023 00:11:54 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   26103
Md5:    ad168b14a5b7efd5137559bade93ad14
Sha1:   7ba3e2c551fdf2879a757fbfcf5f42590269d010
Sha256: 3a4a1053c09137d9d25d118699d7389e019da7a9597b95a7504311b87111909c
                                        
                                            GET /assets/images/fabvicon.png HTTP/1.1 
Host: mamtammalkss.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.119.0.28
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1621
Date: Fri, 27 Jan 2023 00:11:54 GMT
Server: nginx/1.22.1
Accept-Ranges: bytes
ETag: "63d303ac-655"
Last-Modified: Thu, 26 Jan 2023 22:50:20 GMT


--- Additional Info ---
Magic:  PNG image data, 18 x 17, 8-bit/color RGBA, non-interlaced\012- data
Size:   1621
Md5:    8b5398a1e34e98eb41feee59449c9b60
Sha1:   5cb4d4ea11b015e9df07ce7a6752f8f9ac8d4949
Sha256: ba6b17ba2e38e63cf9adf23e8a5a7d6d2315969687bac75aaf0ccb407084cdfb

Alerts:
  urlquery:
    - Phishing - Generic Crypto/Wallet
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6966
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Fri, 27 Jan 2023 00:11:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6966
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Fri, 27 Jan 2023 00:11:55 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12508
x-amzn-requestid: 68787c38-72fe-4d8a-9521-aeb9efa56b05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYWyGIHoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca075e-1ee9488d2dd0437728beac94;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0lNizMpeWOcOlokaaW-WB7LXRReZwaFfPE38C-SmsS_PbxJPhcRYfw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 15:21:30 GMT
age: 31825
etag: "235bf4642e726bb6a303fe1b69238e2e973414cb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12508
Md5:    bad60daf652c598a06510ff955137b69
Sha1:   235bf4642e726bb6a303fe1b69238e2e973414cb
Sha256: d655c5ac17274a30a89c31674e14dc9c1b6bc39bfff94db1c9ff0d8006bb673b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8065
x-amzn-requestid: 4a4a6d4c-9c4b-418d-be96-8a0d1de4828a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYVuHZsoAMFmWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca0757-74c21aa22d11c4240019a4b3;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ep_QyiLEIxubEC9RgbxdlAVYnQ65fxR22squ9p-9aXfpUVyah_oSow==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:43 GMT
age: 8652
etag: "87f304f8583fe6b6e942a9dbcb5efb5ee94987f2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8065
Md5:    262b43386e404cb3d320c47c4cf792c1
Sha1:   87f304f8583fe6b6e942a9dbcb5efb5ee94987f2
Sha256: ca0f72005920b2b2f49c387314540f3cd2f3d7808f0365dfb1c491500e8a8714
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5263
x-amzn-requestid: d9ce236e-c2fa-42dc-b0ff-ffe53a03a5a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVr6RFnrIAMF3DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d226a7-378aa8163ddd262944257578;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:07:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jbNIYT3pKuUF_8NaACEsgFv3KxUt5q_5tUqgsf1Bdtdsw7Oxf6kFfA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:38:46 GMT
age: 59589
etag: "b2e2972ffa82b103c62ffde0fca99454e12d95e6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5263
Md5:    7d2506ac511dfbea29e29ab14ba10f85
Sha1:   b2e2972ffa82b103c62ffde0fca99454e12d95e6
Sha256: fbe6f833114208d84033ba691a74da18d641e38f0f327c752333a339f1baae34
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9056
x-amzn-requestid: 81cf473d-8dc6-49e7-b012-d0b7dfaec7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB4COHTlIAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3a0e-0848461c054db5c66fde9107;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 06:51:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MApUIVJ9KiOB34nLWUtMNmA8deQVoQ9xyNqSUYXlzdLlGoP9n78C5A==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 06:22:45 GMT
age: 64150
etag: "0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9056
Md5:    dc869235086902c4acc379733b6bfdb8
Sha1:   0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae
Sha256: e614e29b14e69209fd4b82a688290f7a3f541909833a6558cf480aca899bab6d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa4a77d-7ed7-4b76-bcb0-24d1679a5359.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10973
x-amzn-requestid: caff330a-0cc6-488d-be82-c09c2bb87408
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLQYTEduIAMFZkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cdfa9b-1f26b225062c8465440cf460;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 03:10:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L-i1AEFIP6AoWwjds6n7ohyz-Ls1HoF9CXNJS7RRDFApBceBZXmoxA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 13:59:06 GMT
age: 36769
etag: "d8268771360e609892c5506f3114dc4f73c0aad0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10973
Md5:    2dfd3530064d405643a31fedd4fd7618
Sha1:   d8268771360e609892c5506f3114dc4f73c0aad0
Sha256: b4790125e39e400c30d640cd0c64497256168892405511ec3d43b03dc0e5715a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:15:25 GMT
age: 60990
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7538
Md5:    131eb343c5abd61939457d69bd371348
Sha1:   ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
Sha256: 8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
                                        
                                            GET /v3.3/customer/action/get_dynamic_configuration?license_id=14971065&url=https%3A%2F%2Fmamtammalkss.azurewebsites.net%2F&channel_type=code&jsonp=__tllxijht9k HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-security-policy: frame-ancestors https://mamtammalkss.azurewebsites.net/;
legacy: 2023-06-30
vary: Accept-Encoding
x-frame-options: allow-from https://mamtammalkss.azurewebsites.net/
content-length: 226
date: Fri, 27 Jan 2023 00:11:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   226
Md5:    7803f78d74dbebb9047ae80f9be8729d
Sha1:   dd8bb3abf19a34e03e5c5c4de23c4c744650677a
Sha256: 00b22343a1b2c89c346870f970bb18c1988f418d1faa227e6d34ddc70e571193
                                        
                                            GET /v3.3/customer/action/get_configuration?license_id=14971065&version=11.1.1.1.1.6.1.1.1.1.1.2.202&group_id=0&jsonp=__lc_static_config HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-encoding: gzip
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 1462
cache-control: public, max-age=46
expires: Fri, 27 Jan 2023 00:12:41 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4432), with no line terminators
Size:   1462
Md5:    2b00987a5013805f24e8f2588d575af0
Sha1:   1b544f21dc5ff532320a52684ebe7b4e4f38cd84
Sha256: 07dfaf681e498bbc5456c575b150757362177001659b77a013e87dedfb358550
                                        
                                            GET /v3.3/customer/action/get_localization?license_id=14971065&version=ff93808ef52c6dd040640c4853b854bd&language=en&group_id=0&jsonp=__lc_localization HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-encoding: gzip
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 3785
cache-control: public, max-age=35
expires: Fri, 27 Jan 2023 00:12:30 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (10873), with no line terminators
Size:   3785
Md5:    d1b3d63fb610e16ae90ebba26513f34d
Sha1:   4baa5a63b3692c86200b62692f3cb1091a380516
Sha256: a691dcbd9c3569a1ee4196426f575560848c89a7a9d8662cd05acd445048cf10
                                        
                                            GET /customer/action/open_chat?license_id=14971065&group=0&embedded=1&widget_version=3&unique_groups=0 HTTP/1.1 
Host: secure.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mamtammalkss.azurewebsites.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 27 Jan 2023 00:11:55 GMT
content-length: 2557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8824), with no line terminators
Size:   2557
Md5:    e73532c0c660a631b8b058705ce26d21
Sha1:   ac886227ce8d418692c8496201f8bc76709b1a63
Sha256: 0ee4d5761027247228422c7b57c6727e95d065c52b4f68501694f1a41754ac03
                                        
                                            GET /widget/static/js/0.d619df13.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Wed, 11 Jan 2023 08:35:01 GMT
x-amz-version-id: fr6Gz9d8KXQbrJuaQVT4sDUpSqjnuR9Q
server: AmazonS3
content-encoding: br
etag: W/"10a3d7ac1ed37325d3341c379ee0de69"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: DcjWrJ5J0UZqsGb4T2ZIU7t__E1ADvqdBmzVXTCZLmhoDUvGkFZlRA==
content-length: 14999
cache-control: max-age=31536000
expires: Sat, 27 Jan 2024 00:11:55 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (47599), with no line terminators
Size:   14999
Md5:    aa354a30c2b34b7c6ca4afb13c39442c
Sha1:   4e033c71e891ad3d60d7437c6e674c601260c66d
Sha256: f4ffa5e37b87bda31ba0d2c7b64fe9939011588c3233c527799262be7169cf95
                                        
                                            GET /widget/static/js/1.242d30c5.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Mon, 16 Jan 2023 07:45:14 GMT
x-amz-version-id: Px6texczRRdv2H_bvm87pAIOH7z7Z.qa
server: AmazonS3
content-encoding: br
etag: W/"6cc6a8d0a347434070e1ae1406714b63"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: wE4tvds8I8rdMvWK8ZjfXt0uA449t3dgMbRjzjYyX0onl7EVVeKJuw==
content-length: 66393
cache-control: max-age=31536000
expires: Sat, 27 Jan 2024 00:11:55 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65462)
Size:   66393
Md5:    837574e727c7477fb1aafaae2ee0f000
Sha1:   4302eeddb91b30897a9f1192197f2bca4f8c8673
Sha256: 1379e2d7c0609f498b00423d0e61eff1f32fca81763b7b5a24120d55a5abfc66
                                        
                                            GET /widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 12852
last-modified: Tue, 18 Oct 2022 07:22:37 GMT
etag: "3b5df7e947d77201eaf22f3dbdac08cc"
x-amz-version-id: 4jMtpmrTh3NU2il.eSSLRODO9UYgvJk9
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HAM50-C2
x-amz-cf-id: KM8abeyaVeSEIxlLTJcUkoNH7_q4l1PlUQolOkL0_K8Ml-Hn8lULcg==
cache-control: max-age=31536000
expires: Sat, 27 Jan 2024 00:11:55 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12852, version 1.0\012- data
Size:   12852
Md5:    3b5df7e947d77201eaf22f3dbdac08cc
Sha1:   21989ca07e4afe32d48982b816b8fac85ce3e668
Sha256: 4a46d61a9aed90cea010dbabcdb510b9ceff1b729a06b169cdbe142f66cbc86f
                                        
                                            GET /widget/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2 HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 12688
last-modified: Tue, 18 Oct 2022 07:22:38 GMT
etag: "d9f5998f47f6f22cb66e7dbf428c76ab"
x-amz-version-id: msVoGOeEvv4rBAjmPT.bOOY9QhLnYq.K
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HAM50-P2
x-amz-cf-id: X3prfpUvaSuujXUioKllfbrWJRSujJaRcEeTIItJqtcJgekTOM8gKw==
cache-control: max-age=31536000
expires: Sat, 27 Jan 2024 00:11:55 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12688, version 1.0\012- data
Size:   12688
Md5:    d9f5998f47f6f22cb66e7dbf428c76ab
Sha1:   86b993baf91f867a03ea62e0d0adc9488530efaa
Sha256: e94ba9c6df7a149b4b3c590bcc484ce24ce7c0f15c6f7f43479035a6311211d6
                                        
                                            GET /v3.3/customer/rtm/ws?license_id=14971065 HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://secure.livechatinc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8chrNIsMG3k/8z6MRamXSg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         23.36.79.16
HTTP/1.1 101 Switching Protocols
                                        
sec-websocket-accept: S7A9EPiRv7mrYVilKFfAfAuORh0=
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://secure.livechatinc.com
legacy: 2023-06-30
Date: Fri, 27 Jan 2023 00:11:55 GMT
Upgrade: websocket
Connection: Upgrade

                                        
                                            POST /customer/token HTTP/1.1 
Host: accounts.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 190
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 138
date: Fri, 27 Jan 2023 00:11:55 GMT
set-cookie: __lc_cid=934a5ccf-df8f-4e4e-451a-48c38dd7e454; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 27 Jan 2025 00:11:55 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __lc_cst=6ce73b9a11e3fc7aacb1b16df7284d8cb2ae05a4fef046ce080c5f39740584802067e62e6f9fdcfe3442e728422acdeaa5b25b6ba9825896b1d01b1c63c5; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 27 Jan 2025 00:11:55 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __lc_cid=934a5ccf-df8f-4e4e-451a-48c38dd7e454; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 27 Jan 2025 00:11:55 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __lc_cst=6ce73b9a11e3fc7aacb1b16df7284d8cb2ae05a4fef046ce080c5f39740584802067e62e6f9fdcfe3442e728422acdeaa5b25b6ba9825896b1d01b1c63c5; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 27 Jan 2025 00:11:55 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __oauth_redirect_detector=counter=1&t=1674778345&tag=98620ed3fc507a90418346413bbef6a934c460ff; Path=/; Expires=Fri, 27 Jan 2023 00:12:25 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   138
Md5:    f4e833e3e81d0e47a1e51e6e6a0ad101
Sha1:   8e3a2c397ce02c9042a88a624ea38fd396c0f0f5
Sha256: b28f8e929f2001c950f8e880a6e6ce53da05b02dec52187dcc1acd2914567186
                                        
                                            GET /widget/static/js/iframe.73879adc.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Wed, 25 Jan 2023 08:47:14 GMT
x-amz-version-id: DWqeOBaonG9oWcxGU0ZIpqeLsqrYCT6x
server: AmazonS3
content-encoding: gzip
etag: W/"90cad0f1a20bbe0c7b70af650ab7491a"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: _moYFAh9CU_TCG1Yzj16TH06fqZO-0j2iiv2chXN-6-X-3i1nCAlEQ==
content-length: 228662
cache-control: max-age=31536000
expires: Sat, 27 Jan 2024 00:11:55 GMT
date: Fri, 27 Jan 2023 00:11:55 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---